CVEvulnerability
CVE-2001-0522
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-08-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.
Affected configurations
• gnu privacy guard 7.1
• gnu privacy guard 7.2
• gnu privacy guard 8.0
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399 distro.conectiva.com.br
- http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01 download.immunix.org
- http://online.securityfocus.com/archive/1/188218 online.securityfocus.com
- http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txt www.calderasystems.com
- http://www.debian.org/security/2001/dsa-061 www.debian.org
- http://www.gnupg.org/whatsnew.html#rn20010529 www.gnupg.org
- http://www.kb.cert.org/vuls/id/403051 US Government Resource
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3 Patch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2001_020_gpg_txt.html www.novell.com
- http://www.osvdb.org/1845 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2001-073.html www.redhat.com
- http://www.securityfocus.com/bid/2797 www.securityfocus.com
- http://www.turbolinux.com/pipermail/tl-security-announce/2001-June/000439.html www.turbolinux.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6642 exchange.xforce.ibmcloud.com
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000399 distro.conectiva.com.br
- http://download.immunix.org/ImmunixOS/7.0/updates/IMNX-2001-70-023-01 download.immunix.org
- http://online.securityfocus.com/archive/1/188218 online.securityfocus.com
- http://www.calderasystems.com/support/security/advisories/CSSA-2001-020.0.txt www.calderasystems.com
- http://www.debian.org/security/2001/dsa-061 www.debian.org
- http://www.gnupg.org/whatsnew.html#rn20010529 www.gnupg.org
- http://www.kb.cert.org/vuls/id/403051 US Government Resource
- http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-053.php3 Patch, Vendor Advisory
- http://www.novell.com/linux/security/advisories/2001_020_gpg_txt.html www.novell.com
- http://www.osvdb.org/1845 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2001-073.html www.redhat.com
- http://www.securityfocus.com/bid/2797 www.securityfocus.com
- http://www.turbolinux.com/pipermail/tl-security-announce/2001-June/000439.html www.turbolinux.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6642 exchange.xforce.ibmcloud.com